216.73.216.86

CVE-2025-29085

· Published 02/04/2025 21:15 · Modified 02/04/2025 21:15

Labels: CVE-2025-29085 2025-04-02CVE-2025-29085[email protected]

Essential information

Published
02/04/2025 21:15
Modified
02/04/2025 21:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
vipshop / saturn cpe:2.3:a:vipshop:saturn:*:*:*:*:*:*:*:*

References